CVE-2025-1963: projectworlds Online Hotel Booking reservation.php sql injection
A vulnerability was found in projectworlds Online Hotel Booking 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /reservation.php. The manipulation of the argument checkin leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1963?
CVE-2025-1963 has been declared as critical due to its potential for remote exploitation.
How does CVE-2025-1963 affect Online Hotel Booking software?
CVE-2025-1963 allows for SQL injection via the checkin argument in the /reservation.php file.
Can CVE-2025-1963 be exploited remotely?
Yes, CVE-2025-1963 can be exploited remotely by an attacker.
What are the potential consequences of CVE-2025-1963?
Exploiting CVE-2025-1963 could allow an attacker to manipulate database queries and access sensitive data.
How can I mitigate the risk of CVE-2025-1963?
To mitigate CVE-2025-1963, sanitize and validate all user inputs in the affected application.